Mercurial > p > roundup > code
view roundup/cgi/PageTemplates/README.txt @ 5924:b40059d7036f
issue2550925 strip HTTP_PROXY environment variable
if deployed as CGI and client sends an http PROXY
header, the tainted HTTP_PROXY environment variable is created. It
can affect calls using requests package or curl. A roundup admin
would have to write detectors/extensions that use these mechanisms.
Not exploitable in default config.
See: https://httpoxy.org/
| author | John Rouillard <rouilj@ieee.org> |
|---|---|
| date | Sun, 13 Oct 2019 17:45:06 -0400 |
| parents | b9988e118055 |
| children |
line wrap: on
line source
See <a href="http://dev.zope.org/Wikis/DevSite/Projects/ZPT">the ZPT project Wiki</a> for more information about Page Templates, or <a href="http://www.zope.org/Members/4am/ZPT">the download page</a> for installation instructions and the most recent version of the software. This Product requires the TAL and ZTUtils packages to be installed in your Python path (not Products). See the links above for more information.